34.74.106.80📋 Copy

# Intelligence Briefing: IP 34.74.106.80/32

## Executive Summary

IP address 34.74.106.80 is a Google Cloud infrastructure endpoint registered to Google LLC (AS396982) with a moderate risk score of 65/100. The IP resolves to Google Cloud infrastructure in South Carolina, US, and currently shows no active open ports or services. Despite being cloud-resident, the elevated risk score warrants monitoring and enhanced logging.

## Ownership and Infrastructure

## Risk Assessment

• Overall Risk Score: 65/100 (Moderate Risk)
• Abuse Confidence: Not applicable (cloud infrastructure)
• Threat Indicators: None detected
• Blacklist Status: Clean (0 blacklist entries)
• DNSBL Presence: Listed on 3 of 8 threat feeds

The elevated risk score is primarily driven by DNSBL listings rather than confirmed malicious activity. The IP is part of a larger cloud network (34.74.96.0/20) with route instability flagged (isRouteStable: false).

## Network Neighborhood Analysis

Subnet: 34.74.106.0/24

• Abuse Density: 0.5 (moderate)
• Classification: mostly_clean
• Total Siblings: 2
• Active Siblings: 2
• Threat Siblings: 1

A neighboring IP (34.74.106.51) shows a risk score of 25 with authority score of 90, indicating this subnet contains one potentially suspicious endpoint.

## Historical Observations

Analysis of 24 signal observations reveals:

• Last Observed: 2026-08-13
• Ownership Changes: None
• Threat Persistence: 0 days
• Classification: Not persistently malicious
• Threat Observation Count: 1

The IP shows no ownership changes and limited persistent threat activity, consistent with legitimate cloud infrastructure that may be reused.

## Operational Status

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• Service Status: Firewalled / No Services
• Anycast: Not detected

## Recommended Actions

Priority: High (Monitoring)

1. Increase logging verbosity for traffic from this IP address

2. Review recent activity for any anomalous behavior patterns

3. Apply defensive rules in network security devices:

```bash

# iptables

iptables -A INPUT -s 34.74.106.80 -j DROP

# nftables

nft add rule inet filter input ip saddr 34.74.106.80 drop

# Cloudflare WAF

Expression: ip.src eq 34.74.106.80

Action: block

```

## Intelligence Notes

This IP represents Google Cloud infrastructure with no services actively exposed. The moderate risk score and DNSBL presence suggest either historical activity or false-positive listings. Monitoring is recommended rather than immediate blocking, particularly given the cloud-native nature of the address. The presence of a threat sibling in the /24 subnet warrants broader subnet monitoring if additional suspicious activity is detected from 34.74.106.51.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.